Privacy Policy
Last updated: October 1, 2026
This policy explains how lupa.casa (“we”) handles personal data on lupa.casa and app.lupa.casa. It is part of the Terms of Use. Questions and requests: support@lupa.casa.
1. What we collect
- Account. When you sign in with Google, we receive your email address and your Google account ID. We do not receive your name, photo, contacts or password.
- Sessions. A cookie keeps you signed in; with it we store the session's times and the IP address it was started from.
- Your content. The lists you create (their filters and names) and the listings you star or hide.
- Searches. What you type into the search box, kept with any list you create from it.
- Technical data. Request logs, which record neither your email address nor your IP address.
2. How we use it
Only to run, secure and improve the service. We do not sell your data, show ads or build advertising profiles. Information received from Google is used only to sign you in, in line with the Google API Services User Data Policy, including its Limited Use requirements.
3. Service providers
We use third-party providers to run the service: hosting and delivery, protection against abuse, sign-in, and turning search text into a filter. Each receives only what its function needs, may process data outside your country, and handles it under its own terms. We may also disclose data when the law requires it.
4. How long we keep it
Your account, lists, stars and hidden listings are kept until you delete them or ask us to delete your account. Sessions expire 30 days after sign-in; session records are kept while your account exists. Server logs are overwritten after about two months. Database backups are kept for up to 30 days.
5. Cookies and browser storage
- lupa_session — keeps you signed in; expires after 30 days or when you sign out.
- lupa_auth — protects the sign-in process; lasts up to 10 minutes.
- lupa_src — remembers which lupa.casa page brought you; set only if you accept cookies; expires after 90 days.
- lupa.lang (local storage) — remembers the language you picked.
- lupa.map (local storage) — remembers whether you keep the map shown.
- lupa.consent (local storage) — remembers your cookie choice.
- lupa.back (session storage) — keeps an unfinished search while you sign in.
- lupa.told (session storage) — counts a visit once per tab.
We use no advertising cookies.
6. Your rights
You can ask to access, correct or delete your data by writing to support@lupa.casa from your account's email address. Deleting your account also deletes your sessions, your stars and hidden listings, and the lists you created, including for anyone you shared them with.
7. Advertisers
Listings come from advertisements published on third-party websites. We collect only what those advertisements make publicly available, and use it only to show and match listings. To ask for your data to be removed, write to support@lupa.casa with a link to the advertisement.
8. Security
Connections to the service are encrypted. We store no passwords, and session tokens are stored only as hashes.
9. Children
The service is not intended for anyone under 18.
10. Changes
We may update this policy at any time. The date above shows the current version.